DEFCON 20 
SAFES AND CONTAINERS — 


DESIGN DEFECTS IN SECURITY 
PRODUCTS THAT HAVE REAL 
CONSEQUENCES IN 
PROTECTING LIVES AND 
PROPERTY 
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|= @GUN SAFES AND PROPERTY SAFES 
/ ARE SOLD TO STORE WEAPONS 
|, @MANY ARE NOT SECURE 


— Boltworks and mechanism 
— Biometrics 
— Key Locks 


| SECURE FOR STORING WEAPONS 
7 @CERTIFIED BY CALIFORNIA DOJ 
©. = PROTECT KIDS FROM GUNS 


P, _ MANUFACTURERS, SECURITY, 

>” & and ENGINEERING 

ae ; = ¢ Many manufacturers do not understand 
“= bypass techniques 


"= @ Many imports, no security, just price 


¢ Representations that are not true by: 
— Manufacturers 
— Dealers 
— Retail 
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“INSECURITY ENGINEERING : 
A DEFINITION 


Intersection of mechanical and security engineering 
Must have both mechanics and security 


Must understand bypass techniques and design against at 


all stages in process 
Develop a new way of thinking by Manufacturers 


Problem: Engineers know how to make things work 


but not how to break them 


» <, . MYTHS ABOUT SECURITY AND 
(2 & PRODUCT DESIGN 


|| = ¢@ Itis patented 


o @ Engineers think the product is secure 


6 we ¢ Product has been sold for many years 


@ No known bypass tools or techniques 
# Product meets or exceeds standards 

¢ Testing labs have certified the product 
Government labs say its secure 


No consumer complaints 


=’ © STANDARDS: THE PROBLEM 


= ¢ MEET ALL STANDARDS BUT THE LOCK OR 


SAFE CAN BE EASILY OPENED 


— Standards are not up-to-date 
— Not test for many methods of attack 
— Consumer relies on standards for security 


— Just because you meet standards does not mean 
the lock or safe 1s secure 


¢ STANDARDS CAN MISLEAD THE PUBLIC 


@ GUN LOCK AND SAFE STANDARDS ARE 
INADEQUATE AND DO NOT PROTECT 


Yee CALIFORNIA DOJ STANDARDS 


ESSENTIALLY WORTHLESS 


REGULATORY GUN SAFE 
STANDARDS - CAL DOJ 


Section 977.50 of the CA Code of Regulations 


@ Shall be able to fully contain firearms and provide for their 
secure storage; 


@ Shall have a locking system consisting of at minimum a 
mechanical or electronic combination lock. The 
mechanical or electronic combination lock utilized by the 
safe shall have at least 10,000 possible combinations 
consisting of a minimum three numbers, letters, or 
symbols. The lock shall be protected by a case-hardened 
(Rc 60+) drill-resistant steel plate, or drill-resistant 
material of equivalent strength; 
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CAL DOJ STANDARDS: 
BOLTWORK 


ee = ¢ Boltwork shall consist of a minimum of 
“ three steel locking bolts of at least % inch 
thickness that intrude from the door of the 

safe into the body of the safe or from the 


body of the safe into the door of the safe, 


which are operated by a separate handle and 
secured by the lock; 


CAL DOJ STANDARDS: 


NG CONSTRUCTION 

ae = Shall be capable of repeated use. The 

2) — exterior walls shall be constructed of a 
minimum 1|2-gauge thick steel for a single- 
walled safe, or the sum of the steel walls 


shall add up to at least .100 inches for safes 
with two walls. Doors shall be constructed 
of a minimum of two layers of 12-gauge 
steel, or one layer of 7-gauge steel 
compound construction; 


CAL DOJ STANDARDS: 
DOOR HINGES 


| |= Door hinges shall be protected to prevent 
“= the removal of the door. Protective features 

include, but are not limited to: hinges not 

exposed to the outside, interlocking door 


designs, dead bars, jeweler’ s lugs and 
active or inactive locking bolts. 


Cy STANDARDS: 
' / NOT REAL-WORLD TESTS 


=~ No testing of covert entry and mechanical 


bypass techniques 


¢ Lowest common denominator for testing 
criteria was adopted for standards 


Allows certification of gun safes that can be 
opened in seconds by kids 


¢ Most states rely on California as Model 


(x SMALL GUN SAFES: 
MAJOR RETAILERS 


amaZon.com 


poe 
EVERY SEASON STARTS AT 


DICK’S 


Walmart 


Save money. Live better. 


,, RETAILERS DON’ T KNOW AND DON’ T 
~ < CARE: IT’ S ALL ABOUT MONEY 


= ¢ Contacted four major retailers to warn 
4 A @ Only one was even concerned 
a s fe No action taken by any of them 
 ENeveor Absolutely no interest 


MISREPRESENTATIONS 
= ABOUT SECURITY 
|  ¢ California DOS Certified 

iS j - Can be relied upon as secure 


i “ay ie, 
| *s.- @ Are safe to secure guns 


¢ Cannot be opened by kids 

@ Only way to open: breaking 
Can be relied upon by consumer 
@ TSA Approved 


DEALERS MISLEAD THE 
PUBLIC ABOUT SECURITY 
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EDDIE RYAN OWENS 
11/27/06 - 09/15/2010 


yg DETECTIVE OWENS CASE: 
= é Clark County Sheriffs Office 
ae = 2003, Deputy’s son shot 10-year old sister 


with service weapon 


i =. @ Sheriffs office mandated all personnel use 


gun safes at home and office 


¢ Purchased for $36 each from Stack-On; 
several hundred units. State purchased 
thousands of them 


¢ Mandated use for weapons at home and 
office and storage of evidence 


~_ 


e== STACK-ON SAFE FOR 
> © SHERIFFS DEPARTMENT 
ee = ¢ UC Agent Eddie Owens had weapon in 


mandated safe in bedroom closet 


2 = @ September 15, 2010, safe is accessed by 


child 
¢ Three-year-old Eddie Ryan is shot and dies 
¢ Investigation clears father 


Father is fired 14 months later for speaking 
up about defective safes 


@ Other deputies complain as well 


(@_ CRIMINAL INVESTIGATION 
>| = #NODNATESTS 

=. @NOGSR TESTS ON VICTIM OR SISTER 
[= = @NO FORENSIC ANALYSIS OF SAFE 


"&) ¢NO EXPERTISE BY LOCAL LAB 
¢ NO UNDERSTANDING OF HOW THE 
SAFE WAS OPENED 
¢ DON’ T KNOW WHO FIRED THE 


WEAPON, ALTHOUGH 11-YEAR OLD 
SISTER CONFESSED 


7. _ SECURITY LABS INVOLVEMENT 


= Examined two safes from same batch; 


/\ == @ Analyzed bolt mechanism, solenoid; 


ek. , ¢ High speed video from inside of safe to 


document the problem; 


@ Analyzed similar safe from AMSEC, 
GUNVAULT, and BULLDOG; 


# Contacted STACK-ON 


@ Expanded inquiry to all STACK-ON 
models 


=" STACK-ON SAFE: 
FROM SAME BATCH 
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* HOW A THREE YEAR OLD 
CAN OPEN A SAFE 


AMSEC DIGITAL: 
SAME DEFECTIVE DESIGN 
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OUR INVESTIGATION 


ye, ANALYZED 10 SAFES: 
-= £ All Defective Security Designs 
| | SECURITY DESIGNS 


— Push-Button keypad lock 
— Fingerprint swipe reader biometric 


— Fingerprint image reader biometric 


— Multi-Button combination 
— Key bypass: wafer or tubular lock 


¢ ALL COULD BE BYPASSED EASILY 
@ NO SPECIAL TOOLS OR EXPERTISE 


(@_ BYPASS TECHNIQUES 

|| ¢COVERT ENTRY METHODS: NONE 
* COVERED BY DOJ STANDARDS 
| Shims 
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=) ¢ Straws from McDonalds 
@ Screwdrivers 
Pieces of brass from Ace Hardware 
 Paperclips 
¢ Fingers 


STACK-ON PC 650 


PC-650 


Portable Case with Electronic Lock 


Electrofed tock allows for a 3 to 8 diait Comberton to be 


prograrvned into te case. inciudes a Dackup trouble ey 


Sim tne Gevan of the case allows for storage in a brietcase 


unger the seat of Cars an aks. Foam paoded b 


airirie firearm guidelines 


~oned for safe 16 be secured woh stew cable 


“T) Cable is inctuced 


11” wide (27.9 cml 
8-1/4" deep (21 om 
2-VA" Bagh [4 cm! 
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BYPASS PROGRAM BUTTON 


ae 
a 
S 
= 
ae 
an 
= 
; 
O 
© 
a 
au 


RE 


ae 
eae 


= 
+I 


Peay bei 


Wa 
O 
O 
- 
oe 
ms 
Guy 
< 
= 
2 
a 
= 
= 
= 
PY) 


et 


eae 


STACK-ON PDS 500 SAFE 


PDS-500 11-19/16" wide (30 cen| 
Drawer Safe with Electronic Lock B58" deep (22 cml 

fami Se cet haat hiccimtoear nt aca abel 44/8" high (11 em] 
Tested and listed as a California DO) Firearm 

Safety Deuce 


2 live action locking bolts and concealed hinges 


fy Patiiware 16 iciuded with) each Vale 


fj MAKE A HOLE AND 
9 £ MANIPULATE MECHANISM 


BYPASS SOLENOID WITH WIRE 
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© STACK-ON BIOMETRIC 
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FALSE PERCEPTION OF SECURITY 
4 


Great security for pistols, 
ammo and valuables at home, 
on the road or in the office. 


Tested and listed as California Department of 

Justice firearms safety devices that conform to the 
requirements of California Penal Code Section 12088 
and the requlations issued thereunder. 


Solid steel, pry resistant, plate steel doors, steel live 
action locking bolts and concealed hinges provide 
greater security 


New models include biometric locks with back up 
electromic touch pad and trouble key 


Electronic lock can be programmed to “beep” 
when the numbers on the key pad are pressed or 
programmed to be silent 


2 FINGERPRINT READER AND 
p> & WAFER LOCK = SECURITY 


7 FINGERPRINT READER 
>.” & MODULAR MECHANISM 


Pane 


PUSH THE READER AND 
DISLODGE THE MODULE 


= ACCESS THE SOLENOID 
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STACK-ON QAS 1200B 
BIOMETRIC SAFE 


QAS-1200-B 


Quick Access Safe with Biometric Lock 


Tested and listed as a Cabiornia DO) Firearm 


: % 
Safety Deve 


Biometnce Lock can accept 28 different fingerprints wath back 
up trouble key. Biometnc reader 6 easy to use and proxyan 
Biometne locks provide Greater security — no cominnations to 


remnendSer 


Holds standard sized pistols and other valuables 
Includes a removable shel. Foarn padded bottorr 


and shett 


10° wide (31 1 com 
12-4" deep 130.5 emi 
8-1/4" high (21 em! 
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STACK-ON QAS-1200-B 
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_ OPEN WITH PAPERCLIP 
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THE STACK-ON DESIGN 
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OPENING THE QAS 1200-B 
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STACK-ON QAS-710 


QAS-710 


Drawer Safe with Motorized Electronic Lock 
Tested and listed as a California DO) Firearm Safety Device 
All steel construction and low profile design allows for storage in a drawer 


Lid pops up when the correct security code 6 entered 
for instant access 

Sate has pre-drilled holes for mounting in 

a drawer or on a shelf 


Fasterwig hardware rmiuded with each safe 


10-1/4" wide {26 cml 
16-5/8" deep [42.2 cml 
3-1/2" high fF cml 


(@_ STACK-ON QAS-710 


| | #MOTORIZED MECHANISM 
@|= @ ELECTRONIC KEYPAD 


— Open with straw from McDonalds 


— Open with brass shim 


— Open with Screwdriver 


— Reprogram the combination by accessing the 
reset switch 


OPENING THE STACK-ON 
QAS-710 ELECTRONIC SAFE 


GUNVAULT GV2000S 


OPEN THE GUNVAULT 
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BULLDOG BD1500 


OPEN THE BULLDOG 
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@==* COMPETENT SECURITY 

=, £ ENGINEERING MATTERS 

| — SECURE PRODUCTS 

|. @PROTECTION OF ASSETS, LIVES, AND 


PROPERTY 


seam @ DEFECTIVELY DESIGNED PRODUCTS 


HAVE CONSEQUENCES 
¢ LIABILITY 
¢ IF YOU HAVE ONE OF THESE SAFES 
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